Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Using valid TLS Cert does not work. Browser reports "cert is not standards compliant" #419

Open
meenie opened this issue Jul 12, 2019 · 1 comment

Comments

@meenie
Copy link

meenie commented Jul 12, 2019

I've created a secret in my K8s environment in Google GKE setting the ca.crt and ca.key as requested in the docs. But when trying to load the URL in the browser, Chrome reports back that the certificate is "not standards compliant". And if I try to use FireFox, it returns an error of: SEC_ERROR_INADEQUATE_KEY_USAGE. Could the issue be that I'm trying to use a wildcard certificate? I've tried this with two different certs from two different companies and I got the same result both times. Screenshot below:

image

@maierlars
Copy link
Contributor

SEC_ERROR_INADEQUATE_KEY_USAGE indicates that you used a certificate for signing that is not allowed to do that. Thus the chain of trust is broken and clients rightfully decline the certificate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants